This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa File: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (raw, json) Hash identifier: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo= Subject key identifier: 60:D3:06:27:F1:82:88:AD:85:8B:5D:C6:D8:9A:B4:A9:07:45:82:2F Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E388DB626C7C8FD1EBE7D253F6CDB74 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8520 IP address blocks: 62.93.212.0/23 maxlen: 23 62.93.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8d:b6:26:c7:c8:fd:1e:be:7d:25:3f:6c:db:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60d30627f18288ad858b5dc6d89ab4a90745822f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:6e:9a:d1:22:97:27:06:67:9b:0a:e6:2e: 88:d2:3b:b1:f7:64:f1:2a:d0:19:10:84:67:40:ee: ac:66:6e:1c:59:80:93:44:d5:8f:8b:88:59:02:ca: 71:c1:71:79:72:3e:71:9a:d5:9b:2b:13:45:ae:3d: b2:b6:89:2a:2e:d2:ca:c6:57:92:c9:a0:e6:8c:13: 0f:c7:bc:f7:6c:7e:5d:6a:1f:c5:e7:86:29:6a:0a: 21:32:99:f3:10:51:de:03:b7:0d:2c:e2:14:a3:5e: 56:47:51:30:2e:ca:4a:c5:f1:02:68:8e:8c:4b:65: 16:71:2a:bb:a7:53:5d:19:02:ea:1f:36:8e:80:58: 5b:0f:3a:14:01:be:ca:75:da:39:11:b7:01:09:e5: 9f:de:b2:3d:aa:5d:af:a8:29:ee:1c:61:d6:89:02: 0c:b7:12:9e:7e:41:a8:08:ef:af:62:b7:c1:23:36: 00:57:cb:d9:34:35:68:6d:68:2b:83:9e:ac:7b:48: 14:f0:0a:99:2c:28:07:49:70:29:f0:ec:10:a6:f5: 9f:f1:1c:e4:3e:e7:4b:f2:08:63:06:a0:d6:db:7b: 2d:c7:9e:bf:04:20:6e:e6:ff:ac:8f:39:a3:a6:40: 30:31:84:b0:30:f2:1d:6f:ae:07:84:a3:44:1f:c9: 6b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D3:06:27:F1:82:88:AD:85:8B:5D:C6:D8:9A:B4:A9:07:45:82:2F X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.93.212.0/23 62.93.246.0/23 Signature Algorithm: sha256WithRSAEncryption 92:5d:ad:b4:b2:8a:48:4a:7d:39:65:56:72:f3:92:13:18:94: 64:1e:3a:68:fa:8e:f4:67:8c:3e:65:bc:58:7a:68:fb:8f:02: 87:61:63:8b:43:10:4d:30:91:17:20:38:90:16:c7:16:27:8d: 72:7e:03:df:11:77:f2:6f:25:64:ee:a0:48:b8:71:82:81:c8: 4c:d0:88:24:b8:8a:32:f5:99:82:28:05:a8:b8:16:53:4e:66: 71:da:56:c0:4d:70:28:2d:12:4e:83:f5:fa:a6:02:c4:6c:ea: 32:33:46:b9:53:64:1b:35:ab:3c:5d:9a:02:0c:86:d5:5f:d5: 17:a7:25:c6:5b:ac:13:a1:81:06:06:11:78:0a:d9:1d:e3:b4: ec:7e:a7:aa:a0:67:6e:2b:49:eb:b8:06:d7:aa:71:3e:f7:e4: f6:12:f3:6a:b1:14:4d:c6:1b:6c:76:a1:5c:80:00:5a:b8:8c: 1b:a2:b0:08:ae:79:53:c9:a6:96:d3:62:9a:2d:95:e7:d4:1d: a1:f7:16:dc:5c:cc:4a:98:79:90:a0:62:20:f4:0d:2b:7b:87: db:01:56:53:59:5f:02:51:76:15:3c:5a:d6:9c:5c:af:af:37: ab:79:a4:01:a6:99:90:a8:dc:a1:b1:58:a1:96:7d:25:86:c0: fb:63:ac:2f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OI22JsfI/R6+fSU/bNt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGQzMDYyN2YxODI4OGFkODU4YjVkYzZkODlhYjRhOTA3NDU4MjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzlumtEilycGZ5sK5i6I0jux92Tx KtAZEIRnQO6sZm4cWYCTRNWPi4hZAspxwXF5cj5xmtWbKxNFrj2ytokqLtLKxleS yaDmjBMPx7z3bH5dah/F54YpagohMpnzEFHeA7cNLOIUo15WR1EwLspKxfECaI6M S2UWcSq7p1NdGQLqHzaOgFhbDzoUAb7Kddo5EbcBCeWf3rI9ql2vqCnuHGHWiQIM txKefkGoCO+vYrfBIzYAV8vZNDVobWgrg56se0gU8AqZLCgHSXAp8OwQpvWf8Rzk PudL8ghjBqDW23stx56/BCBu5v+sjzmjpkAwMYSwMPIdb64HhKNEH8lr/wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGDTBifxgoithYtdxtiatKkHRYIvMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvWU5NR0pfR0NpSzJGaTEzRzJKcTBxUWRGZ2k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBPl3UAwQB Pl32MA0GCSqGSIb3DQEBCwUAA4IBAQCSXa20sopISn05ZVZy85ITGJRkHjpo+o70 Z4w+ZbxYemj7jwKHYWOLQxBNMJEXIDiQFscWJ41yfgPfEXfybyVk7qBIuHGCgchM 0IgkuIoy9ZmCKAWouBZTTmZx2lbATXAoLRJOg/X6pgLEbOoyM0a5U2QbNas8XZoC DIbVX9UXpyXGW6wToYEGBhF4Ctkd47TsfqeqoGduK0nruAbXqnE+9+T2EvNqsRRN xhtsdqFcgABauIwborAIrnlTyaaW02KaLZXn1B2h9xbcXMxKmHmQoGIg9A0re4fb AVZTWV8CUXYVPFrWnFyvrzereaQBppmQqNyhsVihln0lhsD7Y6wv -----END CERTIFICATE-----Generated at Thu Feb 5 13:55:02 2026 by rpki-client